Unauthorized ATM withdrawals can feel alarming when cash leaves your account and you know you didn’t take it out. You generally have federal protections, but how quickly you report the withdrawal can affect your rights.
You should usually contact your bank immediately, secure your debit card, and open a formal dispute. This guide explains the process, important deadlines, investigation rules, and what you can do if your bank denies your claim.
Table of Contents
What Are Unauthorized ATM Withdrawals?
Unauthorized ATM withdrawals are generally cash withdrawals made from your account without your permission. They may involve a stolen card, copied card information, a compromised PIN, card skimming, fraud, or robbery.
ATM transactions generally qualify as electronic fund transfers under federal Regulation E. That means your bank or credit union typically has specific responsibilities when you report an unauthorized withdrawal.
An ATM withdrawal may still qualify as unauthorized even if someone obtained your card through fraud or robbery. CFPB guidance also states that an ATM transfer made because someone forced you to initiate it can qualify as unauthorized.
Report the ATM Withdrawal Immediately
Contact your bank as soon as you notice the withdrawal. You can generally use the fraud number on the back of your debit card, your bank’s official app, or its official website.
Tell the bank clearly that you did not make or authorize the ATM withdrawal. Simply asking what a transaction is may not always trigger the same formal error-resolution process as telling your bank that an error occurred.
Ask the representative to open an unauthorized electronic fund transfer claim. You should also request a claim or reference number.
If your card is missing, lock it immediately through your banking app when that option is available. You should generally ask the bank to permanently cancel and replace a card that you believe was stolen or compromised.
Chase, for example, tells debit card customers who suspect fraud to lock the card and report the unauthorized activity. Wells Fargo similarly advises customers to report suspicious debit card transactions immediately.
Pro Tip: Write down the exact date and time when you first noticed the withdrawal and when you reported it. Those details may become important if your bank later questions whether you met a reporting deadline.
Know the Federal Reporting Deadlines
Your potential responsibility can depend on what happened and how quickly you tell your bank.
| Situation | General federal deadline | Possible effect |
|---|---|---|
| Your debit card or PIN was lost or stolen | Report within 2 business days after discovering the loss or theft | Your liability is generally limited to no more than $50 |
| You wait more than 2 business days after discovering a lost or stolen card | Report as soon as possible | Liability may generally increase to as much as $500 |
| Your card is still with you, but an unauthorized ATM withdrawal appears | Report no later than 60 days after the statement was sent | You generally preserve stronger Regulation E protections |
| You wait beyond 60 days | Report anyway | You may potentially be responsible for later unauthorized transfers that could have been prevented |
The CFPB specifically recommends reporting unauthorized withdrawals immediately. Federal rules can become less protective when you delay reporting a lost card, PIN, or unauthorized transaction.
These are federal rules, not a reason to wait until the deadline. Your bank may offer stronger protections, but you should generally report the withdrawal as soon as you discover it.
Gather Information Before Filing Your Claim
Your bank will typically ask for details about the disputed ATM withdrawal. You should provide as much accurate information as you can.
Useful information may include:
- The withdrawal amount
- The transaction date and time
- The ATM location
- The ATM identification number, if shown
- Whether you still have your physical card
- When you last used the card yourself
- Whether your card or PIN was lost or stolen
- Other unauthorized transactions around the same time
- Your location when the withdrawal occurred
Bank of America, for example, says information such as the ATM location, ATM ID, transaction date, time, and amount may help it research an ATM claim. It lets eligible customers submit ATM transaction claims through Online Banking or by contacting the bank.
Save screenshots of the transaction and any fraud alerts. Keep emails, text notifications, claim numbers, and correspondence from your bank.
Should You File a Police Report?
A police report generally isn’t required in every Regulation E dispute. However, it may provide useful supporting documentation when cash was physically stolen through an ATM.
You may consider filing one when your card was stolen, someone used an ATM in another location, several withdrawals happened quickly, or you believe surveillance footage may exist.
Don’t delay your bank dispute while waiting for the police. Your reporting deadlines with the bank generally continue to matter regardless of whether law enforcement has finished a report.
If you receive a police report number later, you can typically give it to your bank and ask that it be added to your claim.
How Long Does an ATM Dispute Investigation Take?
Your bank generally has 10 business days after receiving notice of an error to investigate and decide whether an error occurred. If the bank confirms an error, it generally must correct it within one business day and report its findings to you within three business days.
If the bank can’t finish within 10 business days, it can generally extend the investigation to as long as 45 days. However, it typically must provide provisional, or temporary, credit while it continues investigating.
Different deadlines may apply in certain situations. For example, investigations involving new accounts or certain foreign transactions may generally take as long as 90 days.
A bank may also require written confirmation after you initially report an error by phone. If the bank requests written confirmation and you don’t provide it within 10 business days, it generally may not have to provide provisional credit during the investigation.
Common Mistakes: Don’t assume a phone call is the end of the process. If your bank asks you to complete a written fraud form, affidavit, or confirmation, submit it before the stated deadline and keep proof that you sent it.
What Is Provisional Credit?
Provisional credit is generally temporary money your bank places back into your account while an investigation continues.
Under Regulation E, if your bank needs longer than the initial investigation period, it generally must provisionally credit the amount in dispute within 10 business days. In certain cases, the bank may withhold up to $50.
The credit isn’t necessarily permanent. If the bank later concludes that the withdrawal wasn’t an error, it may generally remove the temporary credit after providing the required notice.
For new accounts, the initial provisional-credit period may generally be up to 20 business days rather than 10. Policies can also vary when an issuer voluntarily provides protections beyond federal minimums.
What If the ATM Withdrawal Used Your PIN?
Don’t assume that PIN use automatically means you lose your dispute.
Regulation E recognizes a PIN as one method a financial institution can use to identify the cardholder. However, federal guidance also states that consumer negligence generally can’t be used to impose liability beyond Regulation E’s limits.
For example, the CFPB’s official interpretation states that even behavior such as keeping a written PIN with a debit card doesn’t by itself increase liability beyond what Regulation E allows. The exact outcome still depends on the facts of your case.
You should clearly tell your bank if you didn’t enter the PIN or make the withdrawal. You can also provide evidence showing where you were when the ATM transaction occurred.
What If Your Bank Denies the ATM Dispute?
Ask your bank for its written explanation. You generally have the right to request the documents the bank relied on when reaching its decision.
Review those records carefully. Look for information about the ATM location, withdrawal time, card authentication, investigation notes, and any reason the bank believes the transaction was authorized.
You can generally ask for reconsideration if you have new evidence. That might include a police report, travel records, work records, ATM surveillance information, or proof that you were somewhere else.
If you believe your bank didn’t follow Regulation E’s error-resolution requirements, you can also submit a complaint to the Consumer Financial Protection Bureau. The CFPB states that banks must conduct a reasonable investigation of reported electronic fund transfer errors.
What Consumer Complaints Show About ATM Disputes
Consumer reports suggest that disputed ATM withdrawals can sometimes become difficult when a bank believes the correct card and PIN were used.
For example, BBB complaint records include consumers who said unauthorized ATM claims were denied and who later asked banks or financial services companies for the evidence supporting those decisions. These are individual allegations and don’t prove wrongdoing by the companies involved.
Reddit discussions contain similar anecdotal reports from consumers who said ATM fraud claims were initially denied. Some reported filing police reports or escalating complaints to regulators afterward.
Trustpilot reviews of large banks also contain broader complaints about fraud investigations, account access, and customer service. These reviews aren’t independently verified and shouldn’t be treated as proof of how your bank will handle your claim.
The practical lesson is to document everything. Your written records may help if you need to challenge a denial or explain your timeline later.
FAQs: How to File a Dispute on Unauthorized ATM Withdrawals
Q. How soon should you report an unauthorized ATM withdrawal?
A. You should generally report it immediately. Federal liability rules can depend on whether you report a stolen card or PIN within two business days and whether you report statement errors within 60 days.
Q. Will your bank refund an unauthorized ATM withdrawal?
A. Your bank generally must investigate a properly reported unauthorized electronic fund transfer. Whether you receive a permanent refund depends on the investigation, applicable federal protections, and the facts of your case.
Q. Can your bank deny a claim because the correct PIN was used?
A. PIN use may be evidence the bank considers, but your rights still generally depend on Regulation E and the full circumstances. Federal guidance states that consumer negligence alone can’t increase liability beyond Regulation E’s permitted limits.
Q. Can you dispute an ATM withdrawal if you still have your debit card?
A. Yes. An unauthorized withdrawal can still occur while you possess the physical card, such as when card information has been compromised. You should generally notify your bank immediately and no later than 60 days after the bank sends the statement showing the unauthorized transaction.
Conclusion
If you discover unauthorized ATM withdrawals, report them to your bank immediately and clearly state that you didn’t authorize the transactions. Lock or replace the compromised debit card, save your evidence, and keep your dispute reference number.
Your bank generally must follow Regulation E investigation procedures for covered transactions. If the claim is denied, request the written findings and supporting documents, then consider a reconsideration request or CFPB complaint if the evidence supports further action.
Disclaimer: This information is for general educational purposes only and isn’t financial or legal advice. Banking policies and account protections may vary by issuer, so verify account-specific questions with your bank or a qualified professional.
Meet the Author
